Merge pull request #54 from lauhon/patch-1

feat: allow db cert specification
brunojppb · Dec 3, 2024 · bcbea5a · bcbea5a
2 parents 55022fa + 56a77d7
commit bcbea5a
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/config/runtime.exs b/config/runtime.exs
@@ -51,8 +51,21 @@ if config_env() == :prod do
   maybe_ipv6 = if System.get_env("ECTO_IPV6"), do: [:inet6], else: []
   use_db_ssl = System.get_env("USE_DB_SSL") == "1"
 
+  db_ssl_opts =
+    if System.get_env("DATABASE_CA_CERT") do
+      [
+        verify: :verify_peer,
+        cacertfile: System.get_env("DATABASE_CA_CERT"),
+        verify_fun: &:ssl_verify_hostname.verify_fun/3,
+        server_name_indication: String.to_charlist(System.get_env("DATABASE_HOST", ""))
+      ]
+    else
+      []
+    end
+
   config :turbo, Turbo.Repo,
     ssl: use_db_ssl,
+    ssl_opts: db_ssl_opts,
     url: database_url,
     pool_size: String.to_integer(System.get_env("POOL_SIZE") || "10"),
     socket_options: maybe_ipv6

diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
@@ -33,7 +33,6 @@ services:
       - "4000:4000"
     volumes:
       - ./docker_turbo_artifacts:/var/turbo_artifacts
-
   turbo_racer_db:
     image: postgres:14.2
     container_name: turbo_racer_db